安全策略及设计规范的半形式化方法

发布时间：2018-05-14 15:10

本文选题：安全策略 + 设计规范　；参考：《清华大学学报(自然科学版)》2017年07期

【摘要】：对安全功能要求的错误理解会在IT产品中引入内在的安全缺陷。半形式化方法可提高描述安全功能要求的准确性,增强设计的合理性,从而有助于降低引入安全缺陷的风险。因此,该文将重点研究产品安全策略及设计规范的半形式化描述及验证方法。首先,论述了通过分析安全功能接口,从安全功能要求中提取安全策略,以及从模块设计中提取设计规范的一般方法,给出了降低耦合性的子系统和模块划分规则;其次,通过选择和改进现有的半形式化工具,给出了描述安全策略以及设计规范的半形式化方法;最后,以IC卡芯片产品的测评为例,通过对部分安全策略以及设计规范进行半形式化处理,论证了产品所采取的安全策略可使安全功能要求得以充分满足,且相应的设计规范也是合理的。结果表明:该文所建立的半形式化方法在一定程度上适于所有信息技术产品的安全测评。
[Abstract]:Misunderstandings of security functional requirements introduce inherent security flaws into IT products. The semi-formal method can improve the accuracy of describing security function requirements, enhance the rationality of design, and thus help to reduce the risk of introducing security defects. Therefore, this paper will focus on semi-formal description and verification of product security policies and design specifications. Firstly, this paper discusses the general method of extracting security policy from the security function requirement by analyzing the security function interface, as well as the general method of extracting the design specification from the module design, and gives the subsystem and module partition rules to reduce the coupling. By selecting and improving the existing semi-formal tools, a semi-formal method to describe security policy and design specification is given. Finally, the evaluation of IC card chip products is taken as an example. Through semi-formal processing of some security policies and design specifications, it is proved that the security policies adopted by the products can fully satisfy the requirements of security functions, and the corresponding design specifications are reasonable. The results show that the semi-formal method proposed in this paper is suitable for the security evaluation of all information technology products to a certain extent.
【作者单位】：中国信息安全测评中心;
【基金】：国家自然科学基金资助项目(61202493,61402536)
【分类号】：TN40;TP309

【共引文献】